Forum Discussion

Copper Contributor

Oct 12, 2023

DLP for Endpoint licenses question

Hi, I have about 3000 pc already on-boarded on Defender for Endpoint. I also have 50 licenses add-on DLP for Endpoint. I'm going to activate the flag to onboard devices in DLP for Endpoint. I expect...

marcon

Copper Contributor

Oct 12, 2023

Office 365 E3 + Enterrpise Mobility & Security. I'm going to use Microsoft 365 E5 Information Protection and DLP add-on for 50 users to which I want to assign DLP for Endpoint policies

elieelkarkafi

MVP

Oct 12, 2023

marcon the Microsoft E5 Information Protection contains the DLP feature, you don't need to purchase DLP addons, you can refer to the below link to check DLP features where its included

https://learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#microsoft-purview-data-loss-prevention-endpoint-data-loss-protection-dlp

marcon
Copper Contributor
Oct 12, 2023
ok, sorry may be my question was not clear at all. I try to explain better my concern:
after onboarded all devices ( about 3000 ) on DLP for endpoint side and deployed policies only for 50 devices, am I still compliant with terms of contract for remaining 2950 devices? I mean, I need to buy other 2950 addon since all 3000 devices will download the DLP policies ( that will be applied only to 50 devices).
- elieelkarkafi
  MVP
  Oct 12, 2023
  you need a license that include DLP in that case , in you case you can switch from Office 365 E3 + Enterrpise Mobility & Security to Microsoft E5 which includes MDE and DLP or to buy the addons separately
  - marcon
    Copper Contributor
    Oct 12, 2023
    ok. It is enough to buy addon for 50 users or I need to buy addon for 3000 users also if I don't apply DLP policies to all users.